Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/I8GRetwpTtOdu9A0muhYRYrTw7Q.roa
File: I8GRetwpTtOdu9A0muhYRYrTw7Q.roa (raw, json)
Hash identifier: 977QOEX62o4R3NwNROR7SQcXs8NMHDHTVIBWb63TcF8=
Subject key identifier: 23:C1:91:7A:DC:29:4E:D3:9D:BB:D0:34:9A:E8:58:45:8A:D3:C3:B4
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 0A3A
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/I8GRetwpTtOdu9A0muhYRYrTw7Q.roa
Signing time: Wed 29 Sep 2021 02:51:23 +0000
ROA not before: Wed 29 Sep 2021 02:51:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9680
IP address blocks: 168.95.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2618 (0xa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Sep 29 02:51:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=23C1917ADC294ED39DBBD0349AE858458AD3C3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:b2:a6:7b:b8:44:f5:05:52:75:1c:d2:01:
c0:94:27:31:8c:88:c0:d4:95:e0:d3:47:59:05:77:
57:4b:00:c3:b7:98:eb:96:91:e0:dd:8c:ab:b4:bc:
f9:67:b4:47:d2:97:82:94:2a:60:37:d0:5c:cd:c7:
ca:dd:b4:b2:1d:fb:29:c9:7c:f5:da:c3:58:f5:1f:
8d:a3:94:04:61:31:ba:ae:92:dd:d1:27:02:7a:3a:
31:c6:f6:99:f6:b9:db:f3:f9:5c:ed:7d:6a:15:91:
72:4c:10:2f:96:43:f4:81:58:0e:60:6a:a8:b3:87:
ad:a3:ed:84:19:53:be:e5:df:f8:4e:ed:4a:67:3c:
b7:b7:bb:f4:79:99:97:13:d7:b3:2d:a5:82:3b:2f:
fb:cd:c8:fa:33:fc:73:ad:99:51:95:cc:fa:88:e9:
ac:65:ae:98:b5:9a:fb:66:10:17:c9:73:f5:39:d4:
d6:3f:06:0a:37:2a:6c:86:8d:8a:79:55:8c:67:2f:
4c:49:66:8d:7f:f6:cf:7d:77:9b:0d:7a:de:c7:4e:
7f:8b:d6:4c:70:f3:a5:52:3d:37:24:89:3a:3d:93:
4c:99:a6:c2:44:bc:82:1c:5d:f8:4c:d2:5c:21:d7:
e8:f0:51:f7:5a:fa:c9:15:d4:73:9a:df:11:a8:7e:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:91:7A:DC:29:4E:D3:9D:BB:D0:34:9A:E8:58:45:8A:D3:C3:B4
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/I8GRetwpTtOdu9A0muhYRYrTw7Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.246.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e3:17:ee:7d:82:92:c8:99:c3:6a:f3:bd:fc:ac:9b:42:3a:
5b:a9:a7:a4:03:ee:3d:85:79:51:0e:3b:54:0f:65:f0:38:fa:
ba:42:04:51:7e:40:f6:58:35:89:16:ce:9b:4f:eb:3c:fe:d8:
c8:06:6c:c3:25:9e:46:0b:c1:be:db:0c:e8:5f:95:a2:44:44:
92:d1:03:46:4e:48:d6:6d:99:02:b9:46:8f:63:63:b7:1d:3d:
9d:ab:41:3c:74:b4:a7:3b:3c:55:ad:1a:67:90:ee:82:48:b9:
c3:18:7e:b6:a1:35:6e:b8:cd:52:2d:f8:09:1a:c8:cb:55:87:
40:fb:b0:61:b4:0f:88:1f:3c:2f:3f:d6:45:49:d0:43:f4:67:
54:8e:bf:14:2e:6c:bc:6c:a3:b9:27:26:41:1e:d4:e7:49:a1:
b1:ba:8f:27:80:bb:40:ad:38:05:a4:63:b1:72:2d:f1:fa:39:
56:ac:d9:a1:29:81:da:e1:e7:7d:ba:40:8d:f6:3d:c3:c2:a7:
c1:27:05:cf:32:69:11:43:21:01:fd:15:f5:2c:78:60:47:0a:
9f:dd:3e:f1:5a:9b:c2:14:22:5d:02:f8:4a:c4:8a:83:52:f0:
30:b7:04:f0:a0:84:54:f0:9d:04:23:e7:4e:99:c2:e8:7c:b5:
c3:21:d1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org